Keyless theft via OBD key cloning

[DivideBYZero]

This is getting pretty serious in the UK with hundreds of cars going missing. There is even a CCTV video of a 1M being stolen with this method and the alarm not going off, as the OBD port is out of the range of the ultrasonic sensors.

http://pistonheads.com/gassing/topic...W+Thefts&mid=0

I'm disabling the OBD port on my e92 M3 tonight. If I need it, I'll happily re-enable it, but I will not leave it for scum to take my car without any resistance.

[SomeRandomer123]

How does one go about disabling the OBD port? Can I get my dealer to do it? Also, I assume the car does not react to lock/unlock if the jammer is used so making sure it is locked would be wise?

[GreekboyD]

What years are the cars being targeted? What models?

[GreekboyD]

Some videos:

[gosu]

Originally Posted by SomeRandomer123

How does one go about disabling the OBD port? Can I get my dealer to do it? Also, I assume the car does not react to lock/unlock if the jammer is used so making sure it is locked would be wise?

i spent about an hour reading through that whole thread on pistonheads.. scary stuff

you can disable the ODB port by pulling out one of the wires from the socket .. there is a diagram on page 7 of that thread

the thieves don't need to use a jammer .. apparently there is a blind spot where they can break the window without tripping the alarm

i think i'm going to pull out the wire in my ODB port

[Andy M]

Wouldn't the easiest way to lock your vehicle down is pull the fuse out for the OBD port, then physically lock the glove compartment? If you need to bring the car in for servicing or do any OBD coding, just plug the fuse back in. No fuse = no power to OBD port.

[DivideBYZero]

Originally Posted by Andy M

Wouldn't the easiest way to lock your vehicle down is pull the fuse out for the OBD port, then physically lock the glove compartment? If you need to bring the car in for servicing or do any OBD coding, just plug the fuse back in. No fuse = no power to OBD port.

Interesting. Does the fuse only affect the OBD port, and if so do you know which one it is? I know I can use the little map, but not while I'm at my desk at work...!

[DivideBYZero]

Originally Posted by Andy M

Wouldn't the easiest way to lock your vehicle down is pull the fuse out for the OBD port, then physically lock the glove compartment? If you need to bring the car in for servicing or do any OBD coding, just plug the fuse back in. No fuse = no power to OBD port.

I investigated that and it's not possible without compromising other systems.

[kirasir]

All that's needed is to wire one of these into the OBD harness or the fuel pump relay:

http://www.ebay.com/itm/RFID-Key-Acc...item255e23e6da

The OBD harness/port is probably more convinient as one would only need the RFID token to activate the OBD port vs using it every time to start the car if the circuit is wired into the fuel pump/ignition.

-enjoy

[Andy M]

Originally Posted by DivideBYZero

I investigated that and it's not possible without compromising other systems.

Damn.

[Andy M]

Originally Posted by kirasir

All that's needed is to wire one of these into the OBD harness or the fuel pump relay:

http://www.ebay.com/itm/RFID-Key-Acc...item255e23e6da

The OBD harness/port is probably more convinient as one would only need the RFID token to activate the OBD port vs using it every time to start the car if the circuit is wired into the fuel pump/ignition.

-enjoy

That actually looks like a pretty good idea. I might give it a try. Will look into this more.

[Andy M]

Originally Posted by kirasir

All that's needed is to wire one of these into the OBD harness or the fuel pump relay:

http://www.ebay.com/itm/RFID-Key-Acc...item255e23e6da

The OBD harness/port is probably more convinient as one would only need the RFID token to activate the OBD port vs using it every time to start the car if the circuit is wired into the fuel pump/ignition.

-enjoy

So I just looked into this and thought about it.

What if you could do a combination of both this and the glovebox idea?

1. Tap into the DC+12V line via the OBD fuse.
2. Ground the RFID unit to the ground bolt in the fuse panel.
3. Hide all of this behind the glove box area.
4. Lock glove compartment.

I've got fuse taps that I've used to tap my dashcam directly to the fuse box so this whole install should take 15 mins to be honest. Only downside to that is you'll need to carry your RFID keyfob with you all the time but it'll be more secure since they can't just pull the wires out of the RFID unit and bypass the RFID unit to the OBD port. If these guys are stealing cars like this, I'm fairly certain bypassing the power on the RFID unit's not hard at all. However access to a physically locked glove compartment's going to be a lot harder.

Also by tapping into the fuse box as opposed to splicing directly into the wiring, it's external to the BMW's electrical system so warranty won't be voided. (plus you can easily remove it before bringing it in to the dealership)

[mythek]

any update on this or this is no longer a security concern?

[JonJon]

I took my car into the BMW garage this week for another reason and they perfomred a software update whilst there to stop the car being stolen this way.

Surprised wasn't a recall!

[gtron]

is there any real numbers or data supporting these claims beyond what is posted on forums and one-off news sites that we've never heard of?

maybe this is true but it strongly reminds me of old chain emails and hoaxes.

of course someone will sell you something to fix this too.

[DivideBYZero]

Originally Posted by gtron

is there any real numbers or data supporting these claims beyond what is posted on forums and one-off news sites that we've never heard of?

maybe this is true but it strongly reminds me of old chain emails and hoaxes.

of course someone will sell you something to fix this too.

100% real. Full recall by stealth happened early this year, my M3 needed an update and was scheduled via BMW UK and carried out by my usual dealer, but my 120d didn't as it was an October 2011 car, and they fixed the issue with that month production.

[ecs0set]

Are BMW UK acknowledging the issue now then? Previously they ignored any suggestion of an update.

Are there any reference numbers for the software update?

[SenorFunkyPants]

Just call your dealer and arrange to have the security update...shouldn't be a problem (they did mine without argument).

[DivideBYZero]

Originally Posted by SenorFunkyPants

Just call your dealer and arrange to have the security update...shouldn't be a problem (they did mine without argument).

Exactly.

[techietaichi]

I'm glad nobody wants to steal a 325i.

[bimmerfrk]

Originally Posted by techietaichi

I'm glad nobody wants to steal a 325i.

Wakes up to a missing 325i

[jdoublehcubed]

all out UK guys coming out of the woodwork on this thread...